diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 8e817f7..ae285b7 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -37,7 +37,7 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
         with:
           ref: ${{ needs.resolve.outputs.tag }}
           submodules: recursive
@@ -50,7 +50,7 @@ jobs:
           revision="$(git -C vendor/tinybus rev-parse --short=12 HEAD)"
           git -C vendor/tinybus archive --format=tar.gz --prefix="tinybus-$revision/" \
             --output="$PWD/target/package/tinybus-source-$revision.tar.gz" HEAD
-      - uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808
+      - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9
         with:
           name: source-packages
           path: |